PT-2023-19717 · Unknown+6 · Gnu Screen+6

Manuel Andreas · Published 2023-02-03 · Updated 2026-01-26 · CVE-2023-24626

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Screen versions through 4.9.0

Description The issue allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. This occurs when GNU Screen is installed setuid or setgid, which is the default on platforms such as Arch Linux and FreeBSD.

Recommendations For GNU Screen versions through 4.9.0, update to a version later than 4.9.0 to resolve the issue.

Exploit

Fix

DoS

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALT-PU-2025-5942

AZL-26216

BDU:2025-07702

CVE-2023-24626

MGASA-2024-0057

OESA-2023-1263

OPENSUSE-SU-2024:13285-1

USN-6198-1

USN-7978-1

Affected Products

Alt Linux

Astra Linux

Debian

Gnu Screen

Linuxmint

Red Os

Ubuntu

References · 38

• 🔥 https://exploit-db.com/exploits/51252 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6198-1 · Vendor Advisory
• https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-24626 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46802 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-24626 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13285-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7978-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-24626 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-24626 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6198-1 · Vendor Advisory